Assistant Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP in Pune is seeking an Assistant Manager in Security Frameworks and Standards to support cyber strategy and transformation initiatives. You will assess capabilities, review controls, and sustain cyber resilience across technology environments.

The role requires 3–5 years in cybersecurity, familiarity with NIST CSF, ISO 27001 and CIS Controls, and experience with security telemetry tools such as Microsoft Sentinel.

Qualifications

• 3–5 years of experience in Cybersecurity or Cyber Risk.
• Knowledge of NIST CSF, ISO 27001 and CIS Controls.
• Understanding of incident-response methodologies.
• Exposure to cybersecurity governance and transformation initiatives.

Responsibilities

• Assess cybersecurity capabilities across technology environments.
• Review security controls against major frameworks.
• Identify capability gaps and improvement opportunities.
• Support governance, risk management, and assurance activities.
• Develop modernization recommendations and roadmaps.

Skills

Cybersecurity

Security Controls

Cyber Risk

Governance

Compliance

Incident Response

Stakeholder Engagement

Documentation

Education

BE/BTech or MSc Information Security/CS

Tools

Microsoft Sentinel

KQL

Job description

Job Title: Assistant Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation

Assistant Manager | Security Frameworks and Standards | Pune | Cyber Strategy & Transformation
Job requisition ID : 112128
Location: Pune
Entity: Deloitte Touche Tohmatsu India LLP

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks:Learn more about Cyber | Deloitte

We are looking for cybersecurity professionals with exposure to Cyber Risk, Security Controls, Cyber Capability Development, and Security Technology Enablement to support cybersecurity transformation initiatives .

The role focuses on assessing cybersecurity capabilities, evaluating control effectiveness, identifying improvement opportunities, and supporting strategic initiatives that enhance cyber resilience, governance, and security maturity across the enterprise.

Key Skills Required

• Conduct cyber capability and security control assessments across technology environments.
• Review security controls against frameworks such as NIST CSF, ISO 27001, CIS Controls, and organizational standards.
• Identify capability gaps, control deficiencies, cybersecurity risks, and transformation opportunities.
• Support cyber maturity assessments and capability development roadmaps.
• Assist with control documentation, evidence management, remediation tracking, and improvement initiatives.
• Evaluate identity, endpoint, network, cloud, and application security capabilities.
• Assess the effectiveness of preventive, detective, and corrective security controls.
• Utilize Microsoft Sentinel, KQL, and security telemetry to support control validation, capability assessment, and security effectiveness reviews.
• Analyze security events, trends, and control performance indicators to identify enhancement opportunities.
• Support cyber governance, risk management, and assurance activities.
• Contribute to cyber transformation programs focused on strengthening security posture and cyber resilience.
• Develop recommendations for capability modernization, control optimization, and process improvement.
• Collaborate with technology, infrastructure, cloud, and business teams to implement cybersecurity improvements.
• Support cybersecurity metrics, reporting, dashboards, and executive-level insights.
• Maintain assessment findings, recommendations, and transformation deliverables.
• Knowledge of incident-response methodologies and common attack techniques to support security control reviews, control effectiveness assessments, and cyber capability improvement initiatives.
• 3-5 years of experience in Cybersecurity, Cyber Risk, Security Controls, Governance, Compliance, or Cyber Transformation.
• Understanding of cybersecurity control frameworks and industry standards.
• Exposure to NIST CSF, ISO 27001, CIS Controls, or equivalent frameworks.
• Working knowledge of Microsoft Sentinel and KQLfor security analysis, control validation, and cyber capability assessments.
• Experience in security control reviews, risk assessments, or capability assessments.
• Knowledge of identity, endpoint, network, cloud, and application security domains.
• Strong analytical, problem-solving, and stakeholder engagement skills.
• Strong documentation, reporting, and communication capabilities.
• B.E./B.Tech (Tier 1/2) or Master’s degree in Information Security, Computer Science, or a related field